- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to split event data?

nwoolley
Engager
05-26-2020
02:03 PM
Hi! In the Event column, I get the following:
26/05/2020 11:24:51 > Invoice Val Increase on History Report process completed
I have tried multiple ways to get the "Report" name as, ie:
26/05/2020 11:24:51 > Invoice Val Increase on History Report process completed
How do I split that out?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
to4kawa
Ultra Champion
05-26-2020
02:09 PM
...
| rex "\> (?<report>.*?Report)"
use rex
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

nwoolley
Engager
05-26-2020
02:04 PM
I have tried multiple ways to get the "Report" name only ie "Invoice Val Increase on History Report" quotes not required - how do I split that out please
